Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
File:                     S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json)
Hash identifier:          0pkMB80dnVVTLWG3iMTPkH/QWCdLhoLlb+oZdelFx4Q=
Subject key identifier:   82:86:5C:C8:9D:1E:97:D6:9A:DE:E7:1C:09:17:8F:AF:80:BA:A5:4A
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Certificate issuer:       /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial:       0198D583505DA8332802FFAFCED95EE0CF82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 06:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:09 +0000
Files and hashes:         1: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: +wWunVZz0/DUZqTUnTaBBga+k2FZi0xEWufk2y/Bk84=)
                          2: k-8joWHq0IXSAeF06EYlGj2AITA.roa (hash: OrXpbU3ZTRNxide1ly7PEoXo5UOkEqSaVuBCmUkwkxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:50:5d:a8:33:28:02:ff:af:ce:d9:5e:e0:cf:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
        Validity
            Not Before: Aug 23 06:00:09 2025 GMT
            Not After : Aug 24 06:00:09 2025 GMT
        Subject: CN=82865cc89d1e97d69adee71c09178faf80baa54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:2b:37:b1:85:9c:53:b5:15:f2:d9:a0:b6:
                    fc:76:d6:0b:6c:9f:22:3c:67:7f:c3:ee:6b:a5:f2:
                    4e:8b:17:22:e8:99:99:d5:5b:dc:5d:0e:17:4c:b2:
                    5b:bd:78:c9:cd:21:f0:3d:85:56:5f:da:a3:e6:7c:
                    e8:de:fb:f7:e8:fa:0b:cf:16:9f:f2:d3:00:31:4c:
                    c5:64:a5:b4:8e:d0:6d:ad:25:47:6c:17:e1:b2:0a:
                    fa:a9:56:65:1d:55:4d:f9:b1:15:5d:8e:c0:8e:76:
                    87:6c:54:a3:4f:ac:cd:a5:db:02:cb:f2:f3:2b:be:
                    03:df:39:7b:9b:c2:e3:60:d8:a2:8c:5b:30:d7:9a:
                    91:34:5f:22:e5:64:37:e4:f9:29:15:66:7d:54:c6:
                    cd:6f:b9:5e:ed:c3:6c:30:72:44:c3:23:61:0e:06:
                    23:9a:02:66:9d:11:53:27:e9:bc:b6:33:1b:13:4c:
                    ed:5a:d5:6c:25:51:44:e3:ad:e4:82:da:94:49:1a:
                    a5:05:d8:f3:58:ab:d2:82:fc:78:ac:ca:6f:e9:0f:
                    92:45:14:b2:65:7e:31:19:ff:12:25:63:a1:10:d7:
                    20:b6:7a:0b:28:53:e6:ac:f6:83:e8:81:cf:33:be:
                    9c:ad:d6:6a:40:76:84:95:6d:0c:e4:04:a2:0e:16:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:86:5C:C8:9D:1E:97:D6:9A:DE:E7:1C:09:17:8F:AF:80:BA:A5:4A
            X509v3 Authority Key Identifier:
                keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cb:fb:19:32:1a:64:7c:f6:51:81:f4:c7:db:00:b7:4f:71:
         62:79:27:59:3f:5d:c2:60:a1:3a:ee:ef:0f:7f:3f:41:a2:fe:
         c6:27:97:ce:6a:45:77:df:1d:0a:4d:ed:ed:79:8e:eb:30:e5:
         d4:4a:55:3a:42:7c:9a:01:f4:3b:b5:b4:71:a1:ad:bc:bf:82:
         ce:bc:75:9e:34:77:b1:90:c9:d0:3c:b4:79:74:5e:fe:10:65:
         37:6a:3c:d7:e6:55:87:9e:ff:5c:ed:36:14:26:8b:c0:5d:30:
         07:0a:ae:e0:d1:ed:0b:7e:f3:10:f4:24:4f:05:b0:49:af:9f:
         df:e8:0d:ec:cc:63:3f:32:55:85:51:86:5a:a2:65:3f:82:09:
         ae:57:e3:c4:3f:77:96:89:8a:23:15:aa:1f:d2:4a:32:b0:3d:
         19:a8:66:c9:cd:0f:3d:76:c8:f9:3d:9d:75:d5:f0:fe:68:fa:
         d5:03:ce:ea:7a:b7:fa:9e:50:e8:1f:06:96:bb:c2:7d:68:b3:
         fe:34:37:fb:3f:81:80:33:a5:e6:f9:a1:7c:35:59:e5:12:a9:
         b0:60:01:38:61:14:19:53:ab:0f:f0:7f:af:4b:96:5d:c0:7c:
         56:77:dd:04:70:c3:bd:0d:be:1c:15:ef:05:ef:84:68:71:c2:
         d8:5c:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:07 2025 by rpki-client